Hacker News Reader

Tor services get DDOS’d all of the time - you generally have a single host somewhere that is the first hop in relaying traffic back to the service and that is easy to overwhelm. There is a hackish way to have several of those hosts but I think it tops out at a dozen. You lose a lot of audience going to Tor so might not be worth it.

View on HN

32 hosts officially but there are ways of protecting onion websites (caching reverse proxies with some sort of challenge) that protects drug market places that have governments trying to DDOS them offline. Not to mention that Tor has been working on anti-DDOS (From what I remember that will be based on proof-of-work) which will massively increase the cost of DDOS attacks against hidden services.

No, that's not true. The first hop (last from the service's PoV) is basically randomly selected. Unless you restrict it, there will be thousands of possible IPs.

Each hidden service has its own circuits to the Tor network. You can't their side of the connection.

Yes but only one rendezvous point unless you do the hackish stuff. There are a lot of options for scaling the hidden service itself, but the rendezvous point is out of your control (and should be) so that is where the real constraint is.

Reply on news.ycombinator.com